[openssl-dev] [openssl.org #4086] s_server bug in master

Dmitry Belyavsky via RT rt at openssl.org
Sat Oct 10 21:44:04 UTC 2015


Hello,

I've found a bug in s_server command line application in master branch.

During apps_startup() the OpenSSL_add_ssl_algorithms() function is called
 before loading any engines.

The OpenSSL_add_ssl_algorithms() is defined as SSL_library_init().

The SSL_library_init() builds a list of available ciphersuites. In case of
engine-provided algorithms some ciphersuites will be disabled because the
engine providing algorithms is not loaded yet.

The list of ciphersuites is not rebuilded after loading engines. So the
engine-dependent ciphersuites are not available.


-- 
SY, Dmitry Belyavsky

-------------- next part --------------
_______________________________________________
openssl-bugs-mod mailing list
openssl-bugs-mod at openssl.org
https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod


More information about the openssl-dev mailing list